CVE-2026-65581WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A AI ANN Published 08/06/2026 Severity Critical CVE-2026-65579WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A Agricola Published 08/06/2026 Severity Critical CVE-2026-65572WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A A.Williams Published 08/06/2026 Severity Critical CVE-2026-65571WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product 6 69 Clothing Published 08/06/2026 Severity Critical CVE-2026-27377WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product Q QuickCal - Appointment Booking Calendar for WordPress Published 07/23/2026 Severity Medium CVE-2026-57738WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product 7 777 Published 07/13/2026 Severity Critical CVE-2026-22326WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Reprizo Published 06/17/2026 Severity High CVE-2026-22325WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Promo Published 06/17/2026 Severity High CVE-2025-69369WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Racquet Published 06/02/2026 Severity High CVE-2025-58897WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Fermentio Published 06/02/2026 Severity High CVE-2025-58707WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Spin Published 06/02/2026 Severity High CVE-2025-58705WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Crafti Published 06/02/2026 Severity High CVE-2025-53440WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Confidant Published 06/02/2026 Severity High CVE-2026-22500WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product M m2 | Construction and Tools Store Published 03/25/2026 Severity Critical CVE-2026-28129WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L Little Birdies Published 03/05/2026 Severity High CVE-2026-28119WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product N Nirvana Published 03/05/2026 Severity High CVE-2026-28118WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product W Welldone Published 03/05/2026 Severity High CVE-2026-28117WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S smart SEO Published 03/05/2026 Severity High CVE-2026-28079WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Conquerors Published 03/05/2026 Severity High CVE-2026-28024WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Helion Published 03/05/2026 Severity High CVE-2026-27326WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme Published 03/05/2026 Severity High CVE-2026-27098WordPress Au Pair Agency - Babysitting & Nanny Theme theme <= 1.2.2 - Deserialization of untrusted data vulnerability Exploitation status Not known exploited Fix YesAffected product A Au Pair Agency - Babysitting & Nanny Theme Published 03/05/2026 Severity High CVE-2026-22501WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product M Mounthood Published 03/05/2026 Severity Critical CVE-2026-22475WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product E Estate Published 03/05/2026 Severity Critical CVE-2026-22370WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Marveland Published 02/20/2026 Severity High CVE-2026-22368WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Redy Published 02/20/2026 Severity High CVE-2026-22366WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product J Jude Published 02/20/2026 Severity High CVE-2026-22365WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Soleng Published 02/20/2026 Severity High CVE-2026-22364WordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S SevenTrees Published 02/20/2026 Severity High CVE-2026-22363WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Rhodos Published 02/20/2026 Severity High CVE-2026-22362WordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Photolia Published 02/20/2026 Severity High CVE-2026-22361WordPress A-Mart theme <= 1.0.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A A-Mart Published 02/20/2026 Severity High CVE-2025-69409WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P PJ | Life & Business Coaching Published 02/20/2026 Severity High CVE-2025-50003WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Amuli Published 01/22/2026 Severity High CVE-2025-60067WordPress Giardino theme <= 1.1.10 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product G Giardino Published 12/18/2025 Severity High CVE-2025-60066WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product K Katelyn Published 12/18/2025 Severity High CVE-2025-60065WordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Pinevale Published 12/18/2025 Severity High CVE-2025-60064WordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Renewal Published 12/18/2025 Severity High CVE-2025-60063WordPress Rosalinda theme <= 1.2.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Rosalinda Published 12/18/2025 Severity High CVE-2025-60061WordPress Kicker theme <= 2.2.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product K Kicker Published 12/18/2025 Severity High CVE-2025-60060WordPress Pubzinne theme <= 1.0.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Pubzinne Published 12/18/2025 Severity High CVE-2025-60059WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S smart SEO Published 12/18/2025 Severity High CVE-2025-60050WordPress Panda theme <= 1.21 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Panda Published 12/18/2025 Severity High CVE-2025-60049WordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Soleil Published 12/18/2025 Severity High CVE-2025-60048WordPress Tripster theme <= 1.0.10 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T Tripster Published 12/18/2025 Severity High CVE-2025-60047WordPress IPharm theme <= 1.2.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product I IPharm Published 12/18/2025 Severity High CVE-2025-60046WordPress HeartStar theme <= 1.0.14 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H HeartStar Published 12/18/2025 Severity High CVE-2025-58950WordPress Lione theme <= 1.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L Lione Published 12/18/2025 Severity High CVE-2025-58949WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Spock Published 12/18/2025 Severity High CVE-2025-58948WordPress Aromatica theme <= 1.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Aromatica Published 12/18/2025 Severity High CVE-2025-58947WordPress Athos theme <= 1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Athos Published 12/18/2025 Severity High CVE-2025-58946WordPress Vocal theme <= 1.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product V Vocal Published 12/18/2025 Severity High CVE-2025-58945WordPress EcoGrow theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product E EcoGrow Published 12/18/2025 Severity High CVE-2025-58944WordPress Manufactory theme <= 1.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Manufactory Published 12/18/2025 Severity High CVE-2025-58943WordPress Agricola theme <= 1.1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Agricola Published 12/18/2025 Severity High CVE-2025-58942WordPress Dwell theme <= 1.7.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product D Dwell Published 12/18/2025 Severity High CVE-2025-58941WordPress Fabric theme <= 1.5.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Fabric Published 12/18/2025 Severity High CVE-2025-58940WordPress Basil theme <= 1.3.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product B Basil Published 12/18/2025 Severity High CVE-2025-58937WordPress Tacticool theme <= 1.0.13 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T Tacticool Published 12/18/2025 Severity High CVE-2025-58936WordPress Catamaran theme <= 1.15 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Catamaran Published 12/18/2025 Severity High CVE-2025-58935WordPress Lunna theme <= 1.15 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L Lunna Published 12/18/2025 Severity High CVE-2025-58934WordPress The Gig theme <= 1.18.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T The Gig Published 12/18/2025 Severity High CVE-2025-58933WordPress Anubis theme <= 1.25 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Anubis Published 12/18/2025 Severity High CVE-2025-58932WordPress Prisma theme <= 1.10 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Prisma Published 12/18/2025 Severity High CVE-2025-58931WordPress Palatio theme <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Palatio Published 12/18/2025 Severity High CVE-2025-58930WordPress FitFlex theme <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F FitFlex Published 12/18/2025 Severity High CVE-2025-58929WordPress Pantry theme <= 1.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Pantry Published 12/18/2025 Severity High CVE-2025-58928WordPress Heart theme <= 1.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Heart Published 12/18/2025 Severity High CVE-2025-58927WordPress Stallion theme <= 1.17 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Stallion Published 12/18/2025 Severity High CVE-2025-58926WordPress Cerebrum theme <= 1.12 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Cerebrum Published 12/18/2025 Severity High CVE-2025-58925WordPress Neptunus theme <= 1.0.11 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product N Neptunus Published 12/18/2025 Severity High CVE-2025-58923WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Critique Published 12/18/2025 Severity High CVE-2025-58894WordPress Good Mood theme <= 1.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product G Good Mood Published 12/18/2025 Severity High CVE-2025-58893WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Alright Published 12/18/2025 Severity High CVE-2025-58889WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T Towny Published 12/18/2025 Severity High CVE-2025-58803WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Algenix Published 12/18/2025 Severity High CVE-2025-58709WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L Legacy Published 12/18/2025 Severity High CVE-2025-58708WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product 7 777 Published 12/18/2025 Severity High CVE-2025-58706WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product W Woo Hoo Published 12/18/2025 Severity High CVE-2025-58225WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Paragon Published 12/18/2025 Severity High CVE-2025-53453WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Hygia Published 12/18/2025 Severity High CVE-2025-53449WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Convex Published 12/18/2025 Severity High CVE-2025-53448WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Rally Published 12/18/2025 Severity High CVE-2025-53447WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Assembly Published 12/18/2025 Severity High CVE-2025-53446WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product B Beautique Published 12/18/2025 Severity High CVE-2025-53445WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Catwalk Published 12/18/2025 Severity High CVE-2025-53443WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product S Smash Published 12/18/2025 Severity High CVE-2025-53442WordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Rentic Published 12/18/2025 Severity High CVE-2025-53441WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product G Greeny Published 12/18/2025 Severity High CVE-2025-53439WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Harper Published 12/18/2025 Severity High CVE-2025-53438WordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F FitLine Published 12/18/2025 Severity High CVE-2025-53435WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Plan My Day Published 12/18/2025 Severity High CVE-2025-28953WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability Exploitation status Not known exploited Fix YesAffected product S smart SEO Published 11/06/2025 Severity High CVE-2025-60226WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product W White Rabbit Published 10/22/2025 Severity Critical CVE-2025-49401WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability Exploitation status Not known exploited Fix YesAffected product S smart SEO Published 09/05/2025 Severity Critical CVE-2025-49434WordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix YesAffected product C Cars4Rent Published 08/20/2025 Severity Critical CVE-2025-26592WordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product L Lab Published 06/09/2025 Severity High CVE-2025-49073WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix YesAffected product S Sweet Dessert Published 06/06/2025 Severity Critical